Greg Lesnewich

In this discussion, Greg Lesnewich, a Senior Threat Researcher at Proofpoint, and Greg Schloemer, a Senior Threat Intelligence Analyst at Microsoft, dive deep into North Korea's unique state-sponsored cyber activities. They explore the alarming use of stolen cryptocurrency to fund missile tests and the intense pressure operating on DPRK cyber actors. From unconventional tactics like personal identity targeting to the risks of hiring remote North Korean IT workers, their insights provide a chilling look into the geopolitical implications of this persistent threat.

Guest Greg Lesnewich, senior threat researcher at Proofpoint, discusses TA427's use of social engineering and DMARC abuse for information gathering. The group targets policy experts through phishing emails, highlighting the importance of security awareness. They explore the challenges of implementing DMARC policies to prevent spoofing attacks and the role of email in low-level espionage.